Wireless Access

last person joined: 22 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Authenticate IAP against firewall with certificate

This thread has been viewed 0 times

  • 1.  Authenticate IAP against firewall with certificate

    Posted Sep 13, 2017 06:31 PM

    Hi guys,

     

    My customer has a cluster of IAPs managed by Aruba Central. For the IAPs to be managed by Aruba Central, they need to access internet, and right now they have internet access via a proxy server, like the clients. So far everything is OK.

    But now my customer is going to change this scenario and clients and IAPs will have access to internet via a firewall, but first they must authenticate against this firewall with a certificate. This certificate is generated by the firewall and manually uploaded to clients and IAPs in advance. Is this possible in Instant APs?



  • 2.  RE: Authenticate IAP against firewall with certificate
    Best Answer

    EMPLOYEE
    Posted Sep 14, 2017 03:07 AM

    Proxy authentication is not a feature in the current Instant AP releases.

     

    You will need to create an exception in your firewall/proxy for either the Instant AP source IPs, or for the destination of Aruba central to do no authentication. Same applies for the URL database lookups in case you use URL categorization.

     



  • 3.  RE: Authenticate IAP against firewall with certificate

    Posted Sep 14, 2017 10:01 AM

    Hi Herman,

     

    OK, many thanks for clarifying about this feature in Instant.